CVE-2026-94399 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

EUVD-2026-87798

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

CVE-2026-94398

The Elasticsearch search and analytics engine is vulnerable to Uncontrolled Resource Consumption (CWE-400) , which can lead to a denial of service (DoS) via Excessive Allocation (CAPEC-130) . This issue affects all configurations across multiple versions, including 8.x (8.12.0 through 8.19.21) an...

CVE-2026-94398 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

CVE-2026-94398 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

EUVD-2026-87797

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

CVE-2026-82300

Elasticsearch is susceptible to Uncontrolled Resource Consumption (CWE-400) which can result in a denial of service due to Excessive Allocation (CAPEC-130). The vulnerability affects all versions from 8.0.0 up to and including 8.19.21 , and versions 9.0.0 through 9.4.7 and 9.5.0 through 9.5.3 . I...

CVE-2026-82300 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

CVE-2026-82300 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

EUVD-2026-87796

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

CVE-2026-82294 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

CVE-2026-82294 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

EUVD-2026-87795

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

CVE-2026-82294

A Uncontrolled Resource Consumption (CWE-400) vulnerability in Elasticsearch can lead to a Denial of Service via Excessive Allocation (CAPEC-130). The issue affects all configurations with analytical aggregation search capabilities enabled. Specifically, it impacts versions 8.0.0 through 8.19.20 ...

Allocation of Resources Without Limits or Throttling

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via loadfile in vllm/multimodal/media/audio.py, where the VLLMMAXAUDIOCLIPFILESIZEMB file size...

CVE-2026-100650

A flaw was found in vLLM. The system fully downloads and decodes remote or embedded media files before enforcing configured size and quantity restrictions. A remote attacker can exploit this vulnerability by submitting requests containing excessively large or numerous media payloads, forcing the...

CVE-2026-100662

Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...

CVE-2026-100649

vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allocation where sampler subclass shadowing allows independent counter increments. Unauthenticated attackers can select different sampler subclasses in video requests to exceed configured decoder limits an...

CVE-2026-100662

Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...

EUVD-2026-87756

Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain an uncontrolled resource consumption vulnerability in the QPACK encoder-stream instruction decoder QpackEncoderHandler, installed on the peer-initiated unidirectional QPACK encoder stream, type 0x02...